Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/k-lfK2Nu0bBTBeFW46-yt6JkICk.roa
File: k-lfK2Nu0bBTBeFW46-yt6JkICk.roa (raw, json)
Hash identifier: muqDHPsC+eweSCrdqAGPB3SXVNwkzBd2weVA2/7oxMQ=
Subject key identifier: 93:E9:5F:2B:63:6E:D1:B0:53:05:E1:56:E3:AF:B2:B7:A2:64:20:29
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 019422FB88D0D00DDE5C8D68A0575C2FD580
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/k-lfK2Nu0bBTBeFW46-yt6JkICk.roa
Signing time: Wed 01 Jan 2025 17:48:17 +0000
ROA not before: Wed 01 Jan 2025 17:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48520
IP address blocks: 185.114.184.0/22 maxlen: 22
185.114.184.0/24 maxlen: 24
185.114.185.0/24 maxlen: 24
185.114.186.0/24 maxlen: 24
185.114.187.0/24 maxlen: 24
2a06:7100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:88:d0:d0:0d:de:5c:8d:68:a0:57:5c:2f:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Jan 1 17:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93e95f2b636ed1b05305e156e3afb2b7a2642029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e2:e0:9c:ac:16:38:dc:92:d0:02:6b:aa:80:
79:e0:07:9f:f6:19:34:79:f6:90:76:26:ba:da:63:
50:5c:27:1d:15:ef:cf:d0:a3:8d:ec:bf:b2:40:d4:
e6:15:da:57:ab:a3:d6:13:d3:61:db:58:33:cb:69:
68:54:8b:5f:de:10:3d:5e:96:74:ba:3c:a4:22:16:
f4:2a:df:ef:a9:a1:97:62:ae:34:7e:c1:6b:e0:bd:
1d:55:a2:1e:ad:d7:a6:ce:7f:70:58:5a:48:31:3d:
8b:ff:cd:ae:c6:26:71:3c:9a:0c:af:bb:f8:d8:2e:
8a:6f:27:02:6d:a9:ba:92:4a:64:24:d1:51:ad:37:
f4:89:b8:96:04:c0:f9:2b:48:26:d9:b5:87:91:04:
dd:dd:55:47:69:bc:6f:d9:3b:41:9c:bd:24:8a:8b:
2d:e9:eb:0b:b4:05:0a:44:60:21:8c:8b:7a:75:78:
05:f7:85:71:59:b9:4d:45:ae:6e:20:3c:1d:5f:95:
49:4b:f2:73:ac:c3:19:a9:3f:5f:bb:97:91:87:84:
6a:f8:4a:13:95:79:ba:8e:35:92:aa:22:52:ce:52:
cc:ae:6e:90:53:33:9c:33:5e:ed:c4:df:e3:ba:1f:
dd:02:92:06:4a:6d:27:5a:98:13:2b:c9:33:10:f9:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E9:5F:2B:63:6E:D1:B0:53:05:E1:56:E3:AF:B2:B7:A2:64:20:29
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/k-lfK2Nu0bBTBeFW46-yt6JkICk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.184.0/22
IPv6:
2a06:7100::/29
Signature Algorithm: sha256WithRSAEncryption
0a:7c:de:5e:e8:b9:d4:09:19:46:4b:1b:62:fb:a1:fc:f5:54:
6b:e5:5d:b5:c8:a5:30:5a:b2:25:ca:ef:7a:8c:f5:8a:11:50:
56:67:41:60:40:86:34:a7:24:7b:f6:2d:07:07:97:6a:a4:88:
28:44:d8:28:66:03:fe:33:16:59:de:1c:4d:d0:e9:e0:6a:42:
ac:9f:ee:cd:75:c9:6f:e1:59:67:c7:24:ec:96:07:ac:f6:2a:
ad:d8:e3:a4:38:41:32:f4:0e:58:68:34:bc:c8:cf:b1:82:2d:
be:f9:16:81:4c:c4:8a:51:30:50:11:5a:7d:c6:71:4f:7f:2b:
22:28:08:89:3d:67:68:22:0c:62:5f:fd:49:5e:50:95:32:b1:
ec:b3:99:28:a1:39:b3:fb:d6:e2:d2:3b:88:40:f7:f8:d3:24:
78:20:81:46:21:65:ae:b9:8c:02:e2:a0:07:e1:15:44:a5:1e:
6e:f6:c0:87:6e:8e:85:8a:df:d6:51:89:f7:24:3a:91:1f:43:
b7:ac:2b:66:25:c9:df:67:80:e7:15:8b:6b:25:e8:e7:4a:fe:
0e:09:34:56:c9:4b:fe:0f:5c:31:c4:83:58:e3:ca:c4:26:a0:
66:63:ee:0f:ba:68:92:a8:58:d4:7d:0f:e5:93:aa:d9:5b:6a:
cf:81:e3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:48 2025 by rpki-client